HackingCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASICMediumContained
College Hospital Costa Mesa
bd_23c3fb6b4bb28a05 · schema v1 · pii pii-v1
Full breach record for College Hospital Costa Mesa →College Hospital Costa Mesa notified former employees and patients of a data breach. Unauthorized access occurred between August 14, 2024, and September 17, 2024. The organization discovered the incident on September 17, 2024. Affected data included names, Social Security numbers, driver's license numbers, dates of birth, and health information such as diagnoses and dates of service. The organization engaged forensic experts, notified law enforcement, and offered credit monitoring.
Leak gap clock⏱ Leak >90d25 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_e46e068e95bd86c0Leak Sitelockbit_3filed 2024-09-26(164d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-599722
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 10, 2025
- Raw hash
- bf74bbdf7dddf82b5cc3bb38b8f520a685f0eb1a348dd4acd9194322cfb0b019
Reporting entity
- Name
- College Hospital Costa Mesanorm: college hospital costa mesa
- Domain
- chcm.us
Victim entity
- Name
- College Hospital Costa Mesanorm: college hospital costa mesa
- Domain
- chcm.us
Incident
- Discovered
- Sep 17, 2024
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 25 weeks(174 days from discovery to filing)
- Compliance flags
- Leak >90d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.